Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +3 more
- >= 3.10, < 3.10.0-rc1
A vulnerability in the Linux kernel's nilfs2 file system has been addressed, which could lead to a kernel warning and a panic under certain conditions. This issue arises from nilfs2's practice of reusing buffer pointers for metadata, which can be discarded in critical situations. The vulnerability was reported after a commit that changed how dirty data is handled, but it may have existed before. The problem can occur when the kernel is booted with 'panic_on_warn', as a stress test with a corrupted disk image revealed.
The vulnerability can cause a kernel warning and a panic, disrupting system operations.
The vulnerability can be reproduced by using a corrupted disk image with a syzbot stress test. This will trigger the 'mark_buffer_dirty' function, leading to the kernel warning and panic if the 'panic_on_warn' option is enabled.
Users can update to the latest version of the Linux kernel where this vulnerability has been fixed.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.